208 matches found
PT-2022-21053
Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/car-rental-management-system/admin/manage booking.php?id=" API endpoint, specifically through the id variable...
PT-2022-21049
Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/car-rental-management-system/admin/manage movement.php" API endpoint, specifically through the id parameter...
PT-2022-21054
Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/car-rental-management-system/admin/index.php?page=manage car&id=" endpoint, where the id parameter is vulnerable...
PT-2022-21055
Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/car-rental-management-system/admin/manage user.php" endpoint, specifically through the id parameter...
PT-2022-21052
Name of the Vulnerable Software and Affected Versions Car Rental Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/car-rental-management-system/admin/view car.php" API endpoint, specifically through the id variable...
CVE-2022-31007
eLabFTW prior to 4.3.0 contains a permission issue where an authenticated administrator within a team can grant themselves system administrator privileges or create a new system administrator account. The vulnerability stems from abuse of administrator permissions and is mitigated in version 4.3....
Mattermost Server does not prevent System Admin from arbitrary file creation
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can create arbitrary files...
GHSA-9RR5-Q43R-CCV4 Mattermost Server does not prevent System Admin from arbitrary file creation
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can create arbitrary files...
A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability is to system availability.
...
CVE-2020-15598
Trustwave ModSecurity 3.x through 3.0.4 allows denial of service via a special request. NOTE: The discoverer reports "Trustwave has signaled they are disputing our claims." The CVE suggests that there is a security issue with how ModSecurity handles regular expressions that can result in a Denial...
PT-2020-18709
Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote, authenticated attacker to delete arbitrary files on disk. This is achieved via the "admin/system/admin/certificates/delete" API endpoint. Recommendations For...
CVE-2020-5788: Improper Limitation of a Pathname to a Restricted Directory
Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action...
System Admin component of Data Compromise
The vulnerability of the System Admin component of the Oracle Communications Session Border Controller is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of...
CVE-2020-14580
CVE-2020-14580 affects Oracle Communications Session Border Controller (Oracle Communications Applications, component: System Admin) in versions 8.1.0, 8.2.0 and 8.3.0. The description indicates an easily exploitable vulnerability that allows a low-privilege attacker with network access via SSH t...
CVE-2020-14580: Undefined Security Weakness
Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications component: System Admin. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via SSH ...
PT-2020-3531
Name of the Vulnerable Software and Affected Versions Oracle Communications Session Border Controller versions 8.1.0 through 8.3.0 Description The issue is related to insufficient input validation in the System Admin component of the Oracle Communications Session Border Controller. This can be...
CVE-2016-11077
An issue was discovered in Mattermost Server before 3.0.0. It has a superfluous API in which the System Admin can change the account name and e-mail address of an LDAP account...
Directory traversal
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A System Admin can achieve directory traversal...
